CVE-2015-4232: Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by en...

Security readout for executives and security teams

This flaw affects Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices. A person who already has local CLI access could abuse tar parameter handling to run operating system commands. That can turn limited device access into deeper control of important network or storage switching infrastructure. Exposure is most likely where Cisco Nexus or MDS 9000 devices still run NX-OS 6.2(10) and permit CLI access to non-administrative local users. The source bundle does not provide CPEs, a complete version matrix, or named fixed releases. Prioritize validation if these devices support core switching, data center, or storage networking. The issue needs local access, which lowers broad internet risk, but successful abuse could undermine device integrity. Treat it as an infrastructure hygiene and access-control priority until Cisco guidance confirms remediation. Mitigation focus: Identify Nexus and MDS 9000 devices running NX-OS 6.2(10).; Review Cisco advisory CSCus44856 for fixed releases or official workarounds.; Restrict CLI access to trusted administrators only..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.